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(54) Data capture system 

(57) The system involves the fitting of Electronic Number Plates (ENP's) to all road vehicles with 
roadside interrogators (outstations OS) and central control equipment to collect and validate vehicle 
identity data before passing it on to an accounts processing system AP. The system is organised so 
that there are a number of vehicle data processing devices (Data Validators DV) which receive data 
from the outstation units (OS) interrogated by a communications controller (CCL). Each Data Validator 
(DV) is allocated a discrete subset of all vehicles in the system to enable vehicle location checking to be 
maintained as the vehicles move through the system. Any apparent error in vehicle data is passed on 
to a supervisory processor which checks if the error can be explained. This provides a powerful vehicle 
location consistancy check and fraud identification system allowing speedy detection of fraud, stolen 
cars or electronic number plates. 
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SPECIFICATION 

Data capture system 

5 This invention relates to a data capture system 
for the automatic charging of tolls to vehicular 
users of roads. 

According to the present invention there is 
provided a data capture system for the auto- 
1 0 matic charging of tolls to vehicular users of 
roads, the capture system comprising, a plu- 
rality of vehicle identity data transmitting 
means each being individually attachable to 
vehicles, a plurality of roadside vehicle iden- 

1 5 tity data interrogating means linked by a com- 
munications network with a central control 
which includes a plurality of communications 
control processors, and a plurality of vehicle 
identity data validating processors which com- 

20 municate by means of a common inter-proces- 
sor bus, wherein each data validating proces- 
sor is allocated a discrete subset of all vehicles 
handled by the system and wherein upon 
transmitted vehicle identity data being de- 

25 tected by any one roadside vehicle identity 
data interrogating means, the vehicle identity 
data is transmitted through the communi- 
cations network to a communications control 
processor and then by way of the common 

30 inter-processor bus to the particular data vali- 
dating processor allocated to the subset of 
vehicles within which, the detected vehicle 
identity data is located, whereupon, the de- 
tected vehicle identity data is validated for use 

35 in enabling the preparation of toll invoices for 
despatch- to the particular vehicle user con- 
cerned. 

The invention will be better understood 
from the following description of an exem- 
40 plary embodiment which should be read in 
conjunction with the accompanying drawings, 
in which: 

Figure 1 shows a plan-view of the appara- 
tus which comprises an electronic number 
45 plate- 
Figure 2 shows a side-view of the apparatus 
shown in Figure 1 ; 

Figure 3 shows a block schematic of the 
data capture system in accordance with the 
50 invention; 

Figure 4 shows a flow diagram for the data 
validation processing; 

Figure 5 shows a flow diagram for the 
anomaly processing /fraud identification for 
55 the supervisory processor. 

The data capture system comprises elec- 
tronic number plates (ENPs) fitted to road 
vehicles, roadside interrogators, data transmis- 
sion equipment and central office equipment 
60 to collect and validate vehicle identity data 
before passing h on to an accounts processing 
system. 

ELECTRONIC NUMBER PLATE (ENP) 
65 Referring now to the drawings; each vehicle 



in the system is fitted with vehicle identity 
data transmitting means or electronic number 
plate (ENP). 
The ENP 1 , (as shown in Figure 1 and 

70 Figure 2), is a small sealed module approxi- 
mately 200mm long X 75mm wide and 
40mm deep. It is located by means of secur- 
ing points 2 and 3 beneath vehicle body 4. It 
is easy to fit, but once fitted is difficult to 

75 remove. 

Each ENP apparatus has a unique identify- 
ing serial number which is converted into 
code and stored in the ENP apparatus during 
manufacture. All ENP apparatus codes are 

80 independent of any vehicle mechanical regis- 
tration number, making it difficult to copy and 
defraud. 

At the fitting station where the vehicle is 
equipped, the vehicle registration number is 
85 entered into the system by an operator via a 
keypad, whilst the serial number is read auto- 
matically into the system by an interrogator. 
This serial number is not displayed to the 
operator, for security reasons. The ENP appa- 
90 ratus is equipped with two aerials 5 and 6 
which provide electromagnetic coupling with 
inductive road loops (cables buried in the 
road). One aerial receives sufficient energy to 
power up the ENP apparatus when it is in the 
95 immediate vicinity of a power loop PL. This 
aerial also provides a clock input for the ENP 
circuits which generate the synchronous data 
to be transmitted via the other aerial back to a 
receive loop RXL. 

100 The ENP apparatus receives its power and 
clock at 147kHz and transmits the data on a 
73.5kHz carrier. The data rate is 
9.1875kBaud, i.e. one sixteenth of the pow- 
ering frequency. - ~ 

105 The ENP apparatus contains three inte- 
grated circuits (IC's). One, a fuse-link PROM, 
is programmed with the serial number code 
during manufacture. Another, a CMOS cus- 
tom IC performs all logic functions, and a 

110 special bipolar IC, measures signal thresholds 
and performs the linear functions. These IC's, 
together with other components, are mounted 
on a printed circuit board 7. 

The ENP apparatus is capable of transmitt- 

115 ing the serial code (in phase modulated form), 
a security or check code for providing an extra 
protection against fraud, and (optionally) vari- 
able data set-up by the driver of the vehicle 
on a variable data unit within the vehicle. 

1 20 Various types of variable data unit's can be 
used. Some of the data field being varied 
automatically by peripheral equipment con- 
nected via the unit. This may include such 
Hems as emergency vehicle status and priority 

1 25 code, bus identification, depot, fleet and route 
number. The remainder of the data field being 
varied by switches on the unit. 

OUTSTATIONS 
1 30 Along the roadside RS are located vehicle 
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identity interrogating means or outstations OS 
which comprise an interrogator, which is con- 
nected to the inductive road loops (power PL 
and receive RX), a processor, a transmission 

5 unit and a number of interfaces to local equip- 
ment, such as a toil display TD where charges 
are indicated, a closed circuit television con- 
trol CCTVC, a maintenance handset or termi- 
nal TM through which police and mainte- 

10 nance services gain access to information, and 
a priority controller PC for handling control 
signals relating to vehicles requiring prionty. 

CCTV SYSTEM 

1 5 The CCTV system includes cameras C at 
certain roadside interrogation points (outsta- 
tion OS) which store pictures of vehicles in a 
category termed suspect, for onward transmis- 
sion to the central control CC for analysis. A 

20 suspect vehicle could be one for which no 
identity data is received, one where the secu- 
rity code or location is found to be inconsis- 
tent, or one wanted by the police, for example 
a stolen vehicle. A list of suspect vehicles (the 

25 Wanted List') is held by the supervisory pro- 
cessor SP at the central control CC. 

SYSTEM IN GENERAL 

It is arranged for the interrogator to demo- 
30 dulate signals received from each receive loop 
RX and pass the identity data to the processor 
where the code is verified. Vehicle identity 
data are subsequently transmitted from the 
outstations OS by the transmission unit, cen- 
35 tral control CC by way of a communications 
network CN in the form of cable network. 
Each communications controller CCL has con- 
trol of a part of the complete cable network, 
with a number of outstations (e.g. ten) con- 
40 nected (via the network) to each of its com- 
munications channels. The central control CC 
comprises a number of communications con- 
trollers CCU a number of processors (accounts 
processor AP, Supervisory processor SP, fleet 

45 location processor FLP, traffic statistics proces- 
sor TSP, data validation processor or data 
validator DV, and a spare processor SPE), disc 
and tape storage, and operator communi- 
cation facilities OC which include visual dis- 

50 play units (VOLTs) and a hard copy terminal 
or printer. 

The communications controllers CC, handle 
data transmission between the outstations and 
a high speed bus IPB to which all the central 

55 control processors are connected. The IPB is a 
local area network link arrangement termed an 
ETHERNET bus which operates 10 Mbtts over 
a single coaxial cable. Processors tap into the 
cable at intervals allowing up to 100 stations 

60 (nodes) on a 500m cable with up to 1 024 
stations in any network. 

Concerning the various processors men- 
tioned above, the data validation processors 
or data validators DV check the security code 

65 (if used) and location (outstation) of each ENP 



against the last known interrogation data, an 
accounts processor AP, prepares road charge 
Invoices and despatches these periodically to 
the vehicle owners and a supervisory proces- 
70 sor SP oversees the operation of the data 

validators DV, co-ordinates fault detection and 
recovery, including checking if apparent errors 
in vehicle data can be explained by faults 
known to the system ('Anomaly Processing'), 
75 and handles operator communications. 

Data received from the outstation units OS 
are interrogated by the associated communi- 
cations controller CC and passed to the appro- 
priate data validator DV via the high speed 
80 bus (local area communications network IPB). 
Each data validator DV is allocated a discrete 
subset of all vehicles in the system, to enable 
vehicle location checking to be maintained as 
the vehicles move through the area, and are 
85 detected by the different outstation units OS 
and, hence, different communications control- 
lers CC. . , 

Any apparent error in vehicle data is passed 
on to the supervisory processor SP, which 
90 checks if the error can be explained, by known 
faults in the system, such as a faulty upstream 
interrogator. At the same time* if the vehicle 
was detected at a manned or CCTV, outstation, 
data is sent to that outstation for ; display on 
95 the local terminal or inclusion witlvdisplay at 
the central control. Valid vehicle data is out- 
put for use by the accounts processor AP. 

Data that fails the validity check and 
anomaly analysis causes that ENP to be 
100 marked as 'suspect' in the computer records. 
It is added to the 'Wanted Ust^in the supervi- 
sory processor SP and marked for special 
attention in the data validator DV responsible 
for that ENP.^ . 

105 

COMMUNICATION CONTROLLERS 

Referring to the Communications Controllers 
CCL these poll each outstation in turn to 
retrieve the vehicle information. Any control 
110 information being sent from the central con- 
trol CC to an outstation OS is included in the 
appropriate poll request frame. The protocol 
adopted permits messages to be sent from the 
communication controllers CCL to all units on 
115a line. The protocol used is the internationally 
agreed standard for High Level Data Link 
Control Procedures (HDLC). The main function 
of the communication controller CCL is to 
buffer the individual vehicle information for 
1 20 onward transmission to the data validate™ 
DV. It determines from each vehicle s ENP 
code which data validator DV is the required 
destination. (It should be noted that there are 
several data validators DV each processing a 
1 25 subset of all vehicles in the system). The 

communication controller CCL sets up output 
buffers accordingly and then sends the data to 
the destination(s). 

1 30 TRANSFER OF DATA (OUTSTATION TO CEN- 
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TRAL OFFICE) 

Priority is given to any outstation unit which 
is connected to CCTV equipment or which has 
a terminal connected to it; for these sites, 

5 information from the outstation may elicit a 
response from the central control. Usually the 
response will relate directly to a vehicle pass- 
ing the she, so it is essential to get the 
response to the outstation quickly (before the 

1 0 CCTV equipment overwrites a stored picture 
frame with another picture, or before the 
vehicle has moved too far away from a man- 
ual site to permit police intervention). Conse- 
quently these sites are marked as 'high prior- 

1 5 hy' and will be polled by a communication 
controller CCL at about twice per second, 
interrupting the sequential polling of each of 
the other (low priority) outstations. 

As an outstation only transmits information 

20 to the central control when asked to do so by 
a communication controller CCL, different 
types of information can be combined into 
one data packet, depending upon what is 
requested by a communication controller the 

25 current status of the equipment at the outsta- 
tion at the time of polling. These types in- 
clude: 

a) Vehicle ENP data; 

b) Site and lane identification, per set of 
30 ENP data; 

c) Fault indications; 

d) Toll charge confirmation; 

e) Whether a terminal is connected to the 
outstation's handset port; 

35 f) Messages and/or commands from the 
terminal; and 

g) The results of a 'self check by the 
outstation processor. 

Note that these types are for standard out- 

40 stations operating manually. In addition to 
these, outstation initialisation involves several 
'supervisory* data packets to set up the link to 
a communicaions controller CCL and acknow- 
ledge completion of the initialisation process. 

45 As a communication controller CCL receives 
outstation data packets, it sends vehicle ENP 
information to the data validators DV and all 
other information to the supervisory processor 
SP. For each set of ENP information, the 

50 vehicle's ENP serial number is used to identify 
which data validator DV holds its current 
location (and security code, if any) and differ- 
ent data packets are set up to send to each 
data validator DV. High priority site data is 

55 separated from low priority site data so that 
the data validator DV is synchronised to the 
end of polling of the high priority outstations. 

TRANSFER OF DATA (CENTRAL OFFICE TO 

60 OUTSTATION) 

The normal data transmitted from a com- 
munication controller CCL to an outstation is a 
poll for vehicle ENP data. The following items 
may be incorporated within the 'poll request 

65 packet: 



a) Toll charge updates; 

b) Equipment fault clearance; 

c) Instructions to outstation units to perform 
self check; 

70 d) Requests for self check test results; 

e) Replies to messages/commands input 
from the engineer's terminal; and 

f) Confirmation of vehicle commissioning. 
The following items are interleaved with the 

75 poll request packets: 

a) Outstation initialisation and down line 
loading information; and 

b) 'Wanted Vehicle' requests. 

80 HDLC PROTOCOL 

As each outstation OS communicates with a 
single communications controller CC, the op- 
erating mode for the links is that of primary- 
secondary polling. The communication con- 

85 trailer CCL acts as the primary (master) station 
and the outstations on each link as the secon- 
dary (slave) stations. 

Each communication controller CCL outsta- 
tion 'link' is set-up for frame transmission and 

90 messages are passed in the form of a header 
(made up of the required outstation address 
and control information), an information field 
and a frame check sequence. As the message 
is received, the frame check sequence is re- 

95 computed and checked against the frame 

check sequence at the end of the message. If 
the frame check sequence is correct, an ac- 
knowledgement is included in the next frame 
to be sent in the opposite direction. This 

1 00 mechanism allows for re-transmission of un- 
acknowledged messages, thus increasing the 
reliability of data transfers throughout the net- 
work. 

1 05 MESSAGE HANDLING (OUTSTATION) 

For each link under hs control, the com- 
munication controller CCL cycles around each 
outstation OS under the control of two lists. 
AH low priority outstations are contained in 

110 one list and the communication controller CCL 
cycles around them, polling for vehicle ENP 
data, unless interrupted by a higher priority 
item i.e., a high priority outstation poll, a 
wanted vehicle request or initialisation/down- 

115 line loading of an outstation. The last two 
items are random whereas the high priority 
outstation poll is under the full control of the 
communication controller CCL. Each half-sec- 
ond, the communication controller CCL polling 

1 20 task will be flagged to use the high priority 
outstation list — breaking into the low priority 
cycle. When all high priority sites have been 
polled, the communication controller CC re- 
verts to the low priority cycle again. 

1 25 

MESSAGE HANDLING— {CENTRAL OFFICE) 

As messages are received over the HDLC 
links, the communication controller CCL sepa- 
rates the data into buffers for each data vali- 
1 30 dator DV and the supervisory processor SP. 
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To optimise the processing of data from high 
priority sites, the transfer of data to the data 
validator DV over the local area network is 
synchronised to the receipt of the last mes- 
5 sage from a high priority site (from all links). 
Polling for this data is synchronised to a half- 
second flag. 

Messages received from any other central 
control processor are passed to a task which 

1 0 sets up additional data in the poll request data 
packets or interrupts the polling sequence to 
transmit higher priority packets in between 
poll requests. Down line loading of outstations 
database(s) is phased so that the polling se- 

1 5 quence is not unduly delayed. 

WANTED' LIST HANDLING 

A communication controller CCL only re- 
ceives a message packet from a data validator 

20 DV for a 'Wanted' vehicle when an anomaly is 
detected at a high priority outstation. It is 
important to get that information to the out- 
station quickly — to display the data on a 
police terminal or to get a frame of a picture 

25 of the vehicle sent to the central control, so 
the poll request sequence is interrupted, to 
send a special 'wanted' vehicle data packet. 

CONFIGURATION DATA HANDLING AND 

30 INITIALISATION 

During communication controller CC initiali- 
sation, the configuration of all equipment un- 
der the control of that communication control- 
ler CCL is down-line loaded from the supervi- 

35 sory processor and stored in random access 
memory. This data includes the configured 
high priority and low priority outstation lists, 
communication systems addresses for each 
outstation (HDLC network) and central control 

40 processor local area network and the configu- 
ration data for each outstation (including inter- 
rogator and loop layout configuration). 

Whenever an outstation is (re)in'rtialised the 
communication controller CCL controls both 

45 the link set-up procedure and the down-line 
loading of data. If an outstation is being 
initialised whilst the system is active, there 
must be minimal interference with data re- 
trieval from other outstations, so once down- 

50 line loading has started, the data packets are 
interleaved between low priority outstation 
poll requests (not delaying high priority poll- 
ing). 

55 REAL-TIME UPDATES 

Whilst on-line, the changes to communi- 
cation controller configuration data are: 

a) Change of outstation priority, when a 
terminal is connected or disconnected; and 
60 b) Change of data validator DV address on 
the local area network, if processors are sub- 
stituted. 

In the first case, the communication control- 
ler CCL simply changes the relevant outstation 
65 between the high and low priority lists. In the 



latter case, the supervisory processor SP 
sends update information to the communi- 
cation controller CCL which changes the rele- 
vant address for that data validator DV on the 
70 local area network. 

FAULT DETECTION AND RECOVERY 

Apart from carrying out self checks when 
requested and sending the results to the su- 

75 pervisory processor SP, a communication con- 
troller CCL monitors the HDLC links for faults. 
Each data packet sent to an outstation should 
be acknowledged by a reply data packet im- 
mediately. If the reply is corrupted, the frame 

80 check sequence fails to match, or no reply is 
received for any transmission within a timeout 
period, the communication controller CCL re- 
transmits the packet up to twice more. If no 
acknowledgement is received by this time, the 

85 outstation is marked 'suspect faulty' and the 
poll sequence continues. A count of consecu- 
tive 'suspect fault' indications is maintained 
each time the outstation is polled, and is 
cleared when an acknowledgement is re- 

90 ceived. When the count reaches a limit of say 
3, the outstation is marked 'faulty' and the SP 
informed. Once the supervisory processor SP 
has recorded the fault, it can only be cleared 
by an operator (in the Central Office) or engi- 

95 neer (from an outstation terminal). 

DATA VALIDATORS 

Concerning the data validators DV, their 
primary function is to validate vehicle data 

1 00 before preparation of invoices. The data vali- 
dator DV receives individual vehicle ENP data 
from the communication controllers CCL and 
checks the identity and location of each 
vehicle before sending the accounting infor- 

105 mation to the accounts processor AP which 
records each vehicle's road usage and periodi- 
cally invoices the owner. 

In one arrangement of the system, account- 
ing information is sent to the supervisory 

110 processor SP and then to the accounts proces- 
sor AP over a direct serial link SL. In another 
arrangement of the system, accounts informa- 
tion is sent to the accounts processor AP over 
the inter-processor bus IPB. 

115 Whenever the data validator DV fails to 

confirm the identity or location of a vehicle at 
a high priority site, h immediately sends a 
message back to that outstation OS. At a 
CCTV outstation this initiates transmission to 

1 20 the central office of a frame of a picture of the 
vehicle which is suspect. At a manned site the 
data on the suspect vehicle will be output to 
the police or maintenance terminal. 

In addition, for all sites regardless of prior- 

125 ity, if the data validator DV fails to confirm the 
location (outstation) or security code of the 
vehicle, the information (together with the last 
known location) is passed on to the supervi- 
sory processor SP which attempts to recover 

1 30 the situation ('Anomaly Processing') or iden- 
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tify 'suspect' vehicles. These are then added 
to a 'Wanted' list and also notified to the data 
validator DV. 
Two types of anomaly are passed to the 

5 supervisory processor SP for further analysis: 
an invalid security code for an ENP, or an 
invalid location (outstation) when compared 
with the vehicle's last known location. Each of 
these anomalies may be caused by a vehicle 

1 0 apparently missing one or two outstations 
through 'rat runs', a faulty outstation, a faulty 
ENP on the vehicle, or a rogue vehicle whose 
ENP has been tampered with. 

The supervisory processor requests vehicles 

15 to be marked as 'wanted' and whenever a 
data validator DV receives data for such a 
vehicle, it is sent on to the supervisory proces- 
sor SP immediately. The data validation pro- 
cessing is illustrated in the flow diagram of 

20 Figure 4. 

It is necessary to process individual vehicle 
information as fast as it is arriving at the 
central control CC, and to provide any control 
information for the outstations as quickly as 

25 possible. To achieve this, a distributed micro- 
processor system is employed which uses dif- 
ferent levels responsible for different func- 
tions. 

At the lowest level within the central con- 

30 trol, communication controllers CCL poll out- 
stations OS regularly to retrieve individual 
vehicle information from the road. 

As previously mentioned, this information is 
then buffered for onward transmission to a 

35 data validator DV the selection of data valida- 
tor DV being dependent upon the vehicle 
serial number 

A set of data validators DV check each 
vehicle's information in order to charge the 

40 owner for road usage related to the sites 
(outstations OS) passed. In order to handle 
350,000 vehicles, each data validator DV is 
allocated part of the whole database (in the 
order of 40-50,000 vehicles, although this 

45 may be reduced if the local area network can 
handle more nodes easily). When data is 
received from a communication controller CCL 
it is quickly processed and the result passed 
on to either the accounts processor AP or the 

50 supervisory processor SP in accordance with 
whether the accounts processor interfaces the 
bus IPB or is served by a serial link SL from 
the supervisory processor SP respectively. The 
incidence of invalid data should be such as to 

55 keep the loading in the supervisory processor 
SL low compared to the loading on a data 
validator DV. 

The advantages of using a number of small 
processors rather than one large one include: 

60 a) Lower overall cost; 

b) Lower maintenance costs; 

c) Possibility of smaller system initially, with 
controlled build-up to a larger system; 

d) Input-output load is distributed; 

65 e) Any fault will affect only a part of the 



system; 

f) No routine maintenance is required on 
the data validators DV; 

g) The mechanical number/ENP serial num- 
70 ber relationship need only be retained in those 

processors requiring it, i.e., data validators DV 
and supervisory processors SP, thereby max- 
imising security by minimising accessibility of 
this information to operating staff. 

75 

OPERATION 

As data packets are received from com- 
munication controllers CCL they are put into 
high and low priority queues, with the high 

80 priority queue being processed at the first 
available opportunity (when any current pro- 
cessing finishes), in case a response has to be 
returned to the outstation quickly. 
Each vehicle's data are checked for: 

85 i) Correct data validator DV (as routed 
through from the communication controller 
CC); 

ii) Valid, commissioned ENP (enables access 
to the vehicle's current database information); 
90 iii) Being 'wanted' (data sent on the supervi- 
sory processor SP immediately); 

iv) Valid security code (if any); and 

v) Valid location with reference to the last 
recorded location. 

95 If the data was received from a high priority 
site and test (iii) succeeds or any of tests 
(i,ii,iv or v) fail, information is sent immedi- 
ately to the outstation for appending to a 
display on a police terminal or to a display at 

1 00 the central control. 

To speed the processing, ENPs are distri- 
buted evenly throughout each data validators 
DV memory and a simple mapping from the 
low order bits of the ENP serial number is 

105 used to minimise searches for the actual data- 
base entry to a maximum of 30 vehicles in 
each section. Also, table look-up techniques 
are applied to security code checking (byte 
orientated) and location-to-location movement 

110 validation, to optimise processing time. 

MESSAGE HANDLING — SUPERVISORY 
PROCESSOR AND ACCOUNTS 
Anomalies are passed on to the supervisory 

115 processor SP as soon as they are detected 
(one vehicle per packet) over the loca area 
network. Data forwarded to the supe-zisory 
processor SP are the received ENP data and 
(provided the ENP existed in the DV database) 

1 20 the current database record for the vehicle. 
Accounting information is accumulated in 
the data validator DV in a large buffer so that 
larger, infrequent packets can be forwarded to 
the accounts processor when either the data 

1 25 in the buffer reaches a pre-defined size or 
after a known time since reception of data 
from the last outstation. Apart from data vali- 
dator DV Initialisation (down line loading of 
data validator DV configuration and database 

1 30 information) the supervisory processor SP 
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sends the following information to a data 
validator DV: 

a) Time synchronisation — a local area net- 
work packet broadcast to all central control 

5 processors to ensure real time synchronisation 
(the data validator DV needs time-of-day to 
send accounting information); 

b) Add a vehicle to the 'Wanted List' to- 
gether with a reason; 

10 c) Remove an operator-wanted vehicle from 
the Wanted List'; 

d) Remove a data validator DV-anomoly 
from the 'Wanted List'; 

e) Data validated (sending back an anomaly 
1 5 which has been checked out by the SP); 

f) Update vehicle database (sending back 
the most recent data after an anomaly has 
been corrected by analysing several consecu- 
tive packets in the supervisory processor SP); 

20 g) Mark a location 'faulty'; 

h) Clear a 'faulty' indication; 

i) Request a vehicle's current location (in 
response to an operator command at the 
supervisory processor SP); 

25 j) Instructions to perform a self-check. 

The last two require a specific reply to be 
sent to the supervisory processor SP. Process- 
ing of these data packets is handled at a lower 
priority than raw vehicle data. 

30 

REAL-TIME UPDATES 

Whenever a vehicle's ENP data is validated 
(either directly in the data validator DV or via 
the anomaly processing in the supervisory 

35 processor SP), the current database record in 
the data validator DV is updated with current 
location and security code indication. The 
'Wanted List' and 'Faulty Location' markers 
are also updated as and when directed by the 

40 supervisory processor SP. 

A base database change occurs when an 
ENP is commissioned. Here the supervisory 
processor SP controls the commissioning pro- 
cess and updates the data validator DV data- 

45 base before informing the fitting station that 
the ENP is accepted. 

SUPERVISORY PROCESSOR 
Considering the supervisory processor SP, 

50 one of its main functions is to commission 
new ENPs. New vehicle information is sent to 
the supervisory processor SP from a fitting 
station and it is checked against the existing 
database (to ensure there is no duplication of 

55 data). Valid data is then updated in the super- 
visory processor SP and the data validator DV 
and is sent back to the fitting station for 
confirmation by the operator. Upon receipt of 
the confirmation, the ENP is 'commissioned' 

60 and the system is ready to accept information 
from any location. 

The supervisory processor SP. manages the 
resources of all central control CC processors 
and performs secondary functions that arise 

65 from DV data validator operations. 



In one arrangement, the accounts processor 
AP does not interface to the local area net- 
work, so all accounting information is routed 
through the supervisory processor SP, which 

70 queues information on a disc store DS, and 
passes it serially over a 9600 baud direct link 
SL to the accounts processor AP. This ar- 
rangement is not necessary when the ac- 
counts processor AP interfaces to the local 

75 area network. The supervisory processor SP 
system is built around a disc-based operating 
system because this processor needs to: 

a) Hold large amounts of data, for all levels 
of processor in the system; 

80 b) Store vehicle data over quite long periods 
of time, for anomaly processing; 

c) Handle operator communications, via 
several terminals and 

d) Maintain information on system status 
85 and performance related to the many proces- 
sors and their databases. 

Operator communication OC facilities are 
provided via the supervisory processor SP, 
with two visual display units (VDU's) interfac- 

90 ing to the operators in the control room and 
one hard copy terminal upon which the super- 
visory processor SP logs all significant events. 

The supervisory processor SP contains a 
real time clock which is used to maintain 

95 realtime (synchronised) in all other processors 
that require it, for example for accounting 
information, relating CCTV pictures to a time 
of day and accessing vehicle movements in 
time. 

1 00 The supervisory processors SP re-validate 
ENP data whenever possible, identify equip- 
ment faults from ENP data analysis, manage 
database information, and provide information 
to the operators in a simple but effective way. 
105 The supervisory processor SP uses the local 
area network to ensure that communications 
between all central control CC processors are 
maintained and thus all of them are function- 
ing correctly. Changes to system configuration 

110 (commissioning/de-commissioning of ENPs; 
switching to standby processors; adding new 
equipment or links) are all controlled by the 
supervisory processor SP system, so that the 
central store of all database information is 

115 kept up-to date on a disc DS. 

The relationship between each vehicle's me- 
chanical number plate (MNP) and ENP serial 
number is stored in the data validator DV (to 
identify the MNP from the ENP serial number) 

1 20 and in the supervisory processor SP. In the 
supervisory processor SP only, the inverse 
relationship is also held (on disc), with ENP 
being stored against MNP. This enables map- 
ping from an operator-defined MNP to its 

125 corresponding ENP serial number. There is no 
need for any operator to know any vehicle's 
ENP serial number, thus ensuring security of 
this coded information. 

130 ANOMOLY PROCESSING 
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When anomalies are received by the super- 
visory processor SP, rt attempts to re-validate 
the data (security code, location or both). 
Initially invalid locations are checked using 
5 the vehicle's last known location, to discover 
whether the vehicle has passed through faulty 
outstations and to identify 'suspect' outstation 
equipment. If more than one non-faulty out- 
station exists between the two given locations, 
10 the vehicle is added to the Wanted List' and 
a record is kept of all its movements until an 
operator confirms re-validation. 

Invalid security codes cannot be re-validated 
immediately, so a record is started which 
1 5 keeps track of the vehicle's security code 
changes and to continue validating the loca- 
tions. If, after 3 security codes have been 
recorded, its position in the code sequence 
cannot be ascertained, the vehicle identity is 
20 added to the 'Wanted List' as for invalid 
locations. 

For each subsequent recognition of a 
vehicle on the 'Wanted List' the data DV 
sends the latest information to the supervisory 
25 processor SP which adds it to the vehicle's 
record and attempts to re-validate the last 3, 
say, security code and location parameters. 
When a revalidation is achieved, the system 
informs the operator who can display the 
30 record of information and, optionally, clear the 
vehicle from the 'Wanted List'. 

When data is re-validated (the supervisory 
processor SP ensures that both location and 
security code are correct), the latest data are 
35 passed back to the data validator DV to up- 
date its database and the vehicle is removed 
from the 'Wanted List' in both supervisory 
processor SP and data validator DV (unless 
required by the operator for other reasons). 
40 A flow diagram of the anomoly proces- 
sing/fraud identification is illustrated in Figure 
5. Operator facilities OC are available to mani- 
pulate the Wanted List' and for fault manage- 
ment VDU terminals allow system messages 
45 to be displayed in a non«6crolling area of the 
screen, and operator information to be 
scrolled using the remainder of the screen. 

CLAIMS 

50 1 . A data capture system for the automatic 
charging of tolls to vehicular users of roads, 
the capture system comprising, a plurality of 
vehicle identity data transmitting means each 
being individually attachable to vehicles, a 

55 plurality of roadside vehicle identity data inter- 
rogating means linked by a communications 
network with a central control which includes 
a plurality of communications control proces- 
sors, and a plurality of vehicle identity data 

60 validating processors which communicate by 
means of a common inter-processor bus, 
wherein each data validating processor is allo- 
cated a discrete subset of all vehicles handled 
by the system and wherein upon transmitted 

65 vehicle identity data being detected by any 



one roadside vehicle identity data interrogat- 
ing means, the vehicle identity data is 
transmitted through the communications net- 
work to a communications control processor 

70 and then by way of the common inter-proces- 
sor bus to the particular data validating pro- 
cessor allocated to the subset of vehicles 
within which, the detected vehicle identity 
data is located, whereupon, the detected 

75 vehicle identity data is validated for use in 
enabling the preparation of toll invoices for 
despatch to the particular vehicle user con- 
cerned. 

2. A data capture system as claimed in 
80 claim 1 , in which the vehicle identity 

transmitting means is electronic number plate 
apparatus comprising a module incorporating 
storage means for storing the vehicle identity 
data and transmitting means for transmitting 

85 said vehicle identity data and wherein the 

vehicle identity data comprises for each indivi- 
dual electronic number plate apparatus, a 
code representing the unique serial number of 
the apparatus, the serial number being pro- 

90 grammed into the storage means. 

3. A data capture system as claimed in 
claim 2, in which the vehicle identity interro- 
gating means is an outstation comprising on 
interrogator, a transmission unit, a processor 

95 and a plurality of interfaces to local equip- 
ment, wherein the outstation is connected to a 
plurality of inductive receive loops which are 
capable of electromagnetically coupling with 
the transmitting means enabling selection of 

1 00 the codes indicative of a vehicle's identity, the 
code signals being demodulated by the inter- 
rogator and passed to the processor for code 
verification, whereupon the verified code is 
transmitted from- the outstation by the 

105 transmission unit. 

4. A data capture system as claimed in 
claim 3, in which one local equipment com- 
prises a closed circuit television (CCTV) sys- 
tem which stores frames of pictures of 

110 vehicles in a suspect category which are cap- 
tured in the CCTV system, wherein the stored 
picture frames are transmitted to the central 
control for analysis and /or display upon a 
message, relating to vehicles in the suspect 

115 category, being transmitted from a communi- 
cation controller to an outstation incorporating 
a CCTV system. 

5. A data capture system as claimed in 
claim 4, in which the communications net- 

1 20 work is a cable network, wherein the network 
is arranged to link the outstations to an inter- 
processor high-speed bus at the control 
centre, under the control of the communi- 
cation controllers and wherein each communi- 

1 25 cations controller incorporates a plurality of 
outstation channels each of which is con- 
nected to a plurality of outstations wherein 
each communications controller is enabled to 
control a part of the complete cable network. 

1 30 6. A data capture system as claimed in 
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claim 5, in which the data validating proces- 
sors and a supervisory processor are con- 
nected to the inter-processor bus, wherein 
each data validating processor receives, from 
5 a communication controller, vehicle data com- 
prising serial number, security code and loca- 
tion (outstation) concerned with its own allo- 
cated subset of vehicles exclusively for pro- 
cessing. 

10 7. A data capture system as claimed in 
claim 6, in which the data validating proces- 
sor is arranged to check that the serial num- 
ber is in the range allocated to that particular 
data validation wherein when the check is not 

1 5 confirmed a message indicating an invalid 
serial number is sent to the supervisory pro- 
cessor. 

8. A data capture system as claimed in 
claim 7, in which when the serial number 

20 check is confirmed, the memory location in 
the data validator holding the vehicle's data is 
determined wherein a check to determine if 
the electronic number plate identified is in 
commission, wherein if the check is not co- 

25 nfirmed a message indicating an invalid serial 
number is sent to the supervisory processor. 

9. A data capture system as claimed in 
claim 8, in which when the data validation 
processor determines that either the location 

30 (outstation) of the vehicle with respect to its 
fast stored location is invalid or the security 
code with respect to the last stored security 
code is invalid; in each case respectively, a 
message is sent to the supervisory processor 

35 to initiate anomoly processing. 

10. A data capture system as claimed in 
any of claims 7, 8 or 9 in which the vehicle 
data being processed is from a high priority 
outstation, a message is sent to that outsta- 

40 tion to; 

a) display the vehicle data at the police or 
maintenance terminal, or 

b) to append the vehicle data to a frame of 
a picture of the vehicle. 

45 1 1 . A data capture system as claimed in 
claim 6, in which when the data validating 
processor determines the serial number loca- 
tion (outstation) and the security code are 
valid, the mechanical registration number and 

50 location are sent to an accounts processor for 
toll charging purposes. 

12. A data capture system as claimed in 
claim 1 1 in which accounting information is 
routed through the supervisory processor the 

55 accounting information being queued on a 
disc store and transmitted serially over a di- 
rect link to the accounts processor. 

1 3. A data capture system as claimed in 
claim 1 1 , in which the accounting information > 

60 is routed over the inter-processor bus to the 
accounts processor. 

1 4. A data capture system as claimed in 
claim 7, in which when the supervisory pro- 
cessor receives a message indicating an in- 

65 valid serial number the supervisory processor 



arranges for the vehicle identity to be logged 
on a 'Wanted List'. 

1 5. A data capture system as claimed in 
claim 9, in which upon the supervisory pro- 

70 cessor receiving anomoly data from the data 
validating processor the supervisory processor 
performs a process for revalidation of the data 
whereby in respect of invalid locations the 
vehicle's fast location is checked against its 

75 current location to discover whether the 

vehicle passed through faulty outstations and 
if it is determined that more than one non- 
faulty outstation exists between two given 
locations the vehicle identity is logged on a 

80 'Wanted List'. 

1 6. A data capture system as claimed in 
claim 9, in which the supervisory processor 
receives anomoly data from the data validat- 
ing processor, the supervisory processor per- 

85 forms a process for revalidation of the data, 
whereby a record is started which keeps track 
of the security code changes with continued 
validation of locations, and then following the 
re cord a I of three security codes the position in 

90 the code sequence can not be ascertained, the 
vehicle identity is logged on a 'Wanted List'. 

1 7. A data capture system as claimed in 
claims 15 or 16, in which revalidated data 
from the supervisory processor is returned to 

95 the relevant data validation processor whereu- 
pon its records are updated and the vehicle 
identity is removed from the 'Wanted List'. 

1 8. A data capture system as claimed in 
any one of claims 2 to 17, in which the 

100 storage means is a fuse-link PROM. 

1 9. A data capture system as claimed in 
any one of claims 2 to 1 7, in which the 
transmitting means comprises an aerial. 

20. A data capture system substantially as 
1 05 described herein, with reference to, and as 

shown, in the accompanying drawings. 
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